25,525 results · Clear filters · Feed
-
Critical 9.3
Multiple XXE Vulnerabilities
Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning. This issue affects N-central: before 26.4.1.
-
Critical 9.0CVE-2026-118383 Public exploit
Pre-authentication use-after-free in MongoDB Server replica set primary catch-up
A use-after-free in the replication component of MongoDB Server can occur when a newly elected replica set primary completes catch-up. The condition can be caused by requests that do not require authentication, and may result in the server terminating unexpec…
-
Critical 9.8
OpenObserve: Empty external password allows authentication bypass
OpenObserve is a cloud-native observability platform. Prior to 1.1.0, the shared authentication validator in src/api/common/src/auth/validator.rs accepts an empty or whitespace-only HTTP Basic password for an account whose password_ext value is missing or emp…
-
Critical 9.1CVE-2026-121529 Public exploit
A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 throug…
-
Critical 9.6
Security Advisory 0220
On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain conditions, RIPv2 might be silently enabled on management interfaces even when the RIP agent intends to disable it. It allows an unauthenticated att…
-
Critical 9.8
Security Advisory 0208
On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to crash. Successful exploitation causes the BGP agent process to terminate, resulting in the loss of all BGP sessions on the affected device and …
-
Critical 9.4
Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image verificatio…
-
Critical 9.8
In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer…
-
Critical 9.8
In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a log…
-
Critical 9.8
In IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due to memory corruption.…
-
Critical 9.8
In multiple functions of rmmi_utility.c, there is a possible way to trigger an out of bounds write due to a missing bou…
-
Critical 9.8
In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to rem…
-
Critical 9.8
In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in t…
-
Critical 9.8
In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Overflow due…
-
Critical 9.8
In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bou…
-
Critical 9.8
In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote co…
-
Critical 9.8
In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due to a miss…
-
Critical 9.8
In EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to a logic error in the …
-
Critical 9.8
In AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a logic error in the cod…
-
Critical 9.8
In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote cod…
-
Critical 9.8
In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote c…
-
Critical 9.1
HarnessRouter: Service-only routes that write an organization's provider connections could be reached through a multi-tenant console with a made-up bearer
HarnessRouter is a self-hosted unified API for running agent harnesses with sessions, streaming, files, cancellation, and failure handling. Prior to 0.31.8, a console that is not in self-hosted mode attaches the server's internal key to requests carrying an A…
-
Critical 9.4
Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Do…
-
Critical 9.2
Authentication bypass by capture-replay in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0:…
-
Critical 9.3
Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) w…
-
Critical 9.9
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
Critical 9.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.1
Aspire Security Feature Bypass Vulnerability
Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.
-
Critical 9.8CVE-2026-119958 Public exploit
Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability
Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
-
Critical 9.6
Visual Studio Code Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Search Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Azure OpenAI Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.
-
Critical 9.1
Microsoft Graph Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.
-
Critical 9.8
Azure Managed Grafana Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
-
Critical 9.0
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
Critical 9.8
Windows Kerberos Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
-
Critical 9.0
ASP.NET Core Elevation of Privilege Vulnerability
Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
-
Critical 9.8
Windows Xbox Live Networking Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Color Management Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.